visudo non-functional in 7.0-RELEASE jail

Boris Samorodov bsam at ipt.ru
Wed Jul 30 16:47:57 UTC 2008


On Wed, 30 Jul 2008 12:04:16 -0400 (EDT) Randy Schultz wrote:
> On Wed, 30 Jul 2008, Edwin Groothuis spaketh thusly:

> -}Since lock_file() consists of three different functions depending
> -}on your capabilities, could you pastebin the output of your config.log
> -}somwwhere to figure out which was is used?

> http://www.pastebin.be/13079

> -}
> -}I have visudo (and sudo) here working without any problems, inside
> -}and outside jails.

> For fbsd 7.0?  I have it for 6.x.  If yours is 7.0 then I must have missed
> something.  Did you set your jails up the long way or with ezjail?

I have 7-STABLE here and some ezjail jails. The "sudo ezjail update -i"
command gives me:
-----
% ls -l /space/jails/basejail/usr/bin/su     
-r-xr-xr-x  1 root  wheel  16904 30 июл 20:34 /space/jails/basejail/usr/bin/su
-----

...while before updating it has been:
-----
-r-sr-xr-x  1 root  wheel  16904 23 июл 19:09 /space/jails/basejail/usr/bin/su
-----

Note the bit "s" for the owner of the file. Sure the command
"sudo chmod u+s /space/jails/basejail/usr/bin/su" helps here.


HTH and WBR
-- 
bsam


More information about the freebsd-jail mailing list